Trihedral Engineering Limited VTScada Integer Overflow Vulnerability

Vulnerabilities 1

• High 7.8
  CVE-2014-9192

  Trihedral Engineering Limited VTScada Integer Overflow

  Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memo…

  Trihedral Engineering VTS
  Dec 11, 2014

Revision history

1. 2025-06-06 #2

   Advisory converted into a CSAF

2. 2014-09-11 #1

   Initial Publication

References

• ICS Advisory ICSA-14-343-02 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-14-343-02
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014